Hi, In order to avoid a semi automatic unclaim, I work on apache2 trying to reproduce the CVE or at least creating autopkgtest avoiding regression. Bastien